Restricted · MFA required
Sessions: 30-min idle · 8-hour absolute · 5-attempt lockout · IP allowlist optional